Microsoft Fixes 90 New Flaws, Including Actively Exploited NTLM and Task Scheduler Bugs
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-21410 | Privilege Escalation via NTLM Relay Flaw in Microsoft Exchange Server | 9.8 | 13% | KEV | KEV |
| CVE-2024-38021 | Microsoft Outlook Remote Code Execution Vulnerability | 8.8 | 3% | ||
CVE-2024-49039+1 related CVE | Windows Task Scheduler Elevation-of-Privilege Flaw Actively Exploited in the Wild | 8.8 group max | 14% | KEVRansomware | KEV |
| CVE-2024-43498 | .NET and Visual Studio Remote Code Execution Vulnerability | 9.8 | 4% | ||
| CVE-2024-43602 | Azure CycleCloud Remote Code Execution Vulnerability | 9.9 | 2% | ||
| CVE-2024-43639 | Windows KDC Proxy Remote Code Execution Vulnerability | 9.8 | 9% | ||
| CVE-2024-49019 | Active Directory Certificate Services Elevation of Privilege Vulnerability | 7.8 | 2% | ||
| CVE-2024-5535 | Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to… | 9.1 | 6% |
From the original article
4 min read at thehackernews.com
Ravie Lakshmanan Nov 13, 2024 Vulnerability / Patch Tuesday Microsoft on Tuesday revealed that two security flaws impacting Windows NT LAN Manager ( NTLM ) and Task Scheduler have come under active exploitation in the wild. The security vulnerabilities are among the 90 security bugs the tech giant addressed as part of its Patch Tuesday update for November 2024.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.